PT-2016-2674 · Gnu+2 · Gnu Mailman+2

Publicado 2016-02-21 · Atualizado 2017-07-29 · CVE-2016-7123

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU Mailman versions prior to 2.1.15

Description The issue is related to a cross-site request forgery (CSRF) vulnerability in the admin web interface. This vulnerability allows remote attackers to hijack the authentication of administrators.

Recommendations For GNU Mailman versions prior to 2.1.15, update to version 2.1.15 or later to resolve the issue. As a temporary workaround, consider implementing additional authentication measures or restricting access to the admin web interface to minimize the risk of exploitation.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

ALT-PU-2016-1141

BDU:2016-02066

CVE-2016-7123

USN-3118-1

Produtos afetados

Alt Linux

Gnu Mailman

Ubuntu

Referências · 13

• https://cve.org/CVERecord?id=CVE-2016-7123 · Nota de Segurança
• http://securitytracker.com/id/1037160 · Nota
• https://osv.dev/vulnerability/CVE-2016-7123 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3118-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-7123 · Nota de Segurança
• http://securityfocus.com/bid/92732 · Nota
• https://bugs.launchpad.net/bugs/1614841 · Nota
• https://ubuntu.com/security/CVE-2016-6893 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-02066 · Nota de Segurança
• https://bugs.launchpad.net/mailman/+bug/1614841/comments/8 · Nota
• https://ubuntu.com/security/CVE-2016-7123 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-7123 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3118-1 · Aviso do Fabricante